topic Re: It does not update in General Topics

It does not update

Sistemas_SanLucar — Wed, 30 Nov 2016 13:53:45 GMT

Hi,

Pa-500 show "app mistach" .

They have 6.1.0 version and are configured in active-passive mode.

They shows in interface web "App version" and "Threat version" Mismatch.

If I make a ping to updates.paloaltonetworks.com from devices, my computer and "web ping online" and the this test fails. Is it normal?

In system/logs, it shows connection to updates.paloaltonetworks.com and think that they have been downladed new version.

I think in web interface this information is wrong.

Could someone help me?

Regards

Re: It does not update

TranceforLife — Wed, 30 Nov 2016 17:18:37 GMT

Hi,

Yes ping is disabled for updates.paloaltonetworks.com (allows software downloads and licenses retrieval).

Where downloads.paloaltonetworks.com (allows dynamic updates to download) should respond for the ping requests.

More info here:

https://live.paloaltonetworks.com/t5/Management-Articles/Unable-to-Perform-Dynamic-Updates-with-quot-updates/ta-p/56998

Did you try manually check and install or reinstall app/threat ? l would do it from the passive side. Check if you can resolve DNS names for the both sites from the device.

Thx,

Myky

Re: It does not update

BPry — Wed, 30 Nov 2016 17:20:59 GMT

It looks like everything is connecting and downloading just fine but it simply didn't install the 640 update. Try to manually initiate the install on the Passive firewall and see if it was simply a hiccup with the install on the Passive unit. If it installs fine manually then I would wait until the next update and see if it happens again, if it doesn't than it was likely just a fluke.

Re: It does not update

BPry — Wed, 30 Nov 2016 20:04:15 GMT

Doing the manual install this evening might be best; looking at your settings the emrgency update 641 would give you a chance to see if it installs correctly tomorrow morning, if it not let us know.